22 Feb
2009
22 Feb
'09
1:45 p.m.
Hi Guillaume,
On Fri, Feb 20, 2009 at 6:22 PM, Guillaume Lerouge > Check the rights
of your XWiki space. Since the page is located in the XWiki
space, if you protected that space against view,
unregistered users will
automatically be redirected to a login page when trying to see it.
Right, that works. But I don't want unregistered Users to see things
in the XWiki space, like lists of all Users, and things like that.
Sure, I can disable the things I learn one by one that I don't want
people to see, but I'd rather like restrict XWiki space, and only
explicitly allow those pages/classes that are needed for the
registration.
The Email verification link seems to be something similar - one of
these pages or classes in the XWiki space seems to be responsible for
enabling velocity code execution in the registration Emails. (And also
in the ResetPassword Email, because enabling this page to be viewed by
unregistered users, they can view the page, but the Email does not
contain proper content but unexecuted velocity code).
Henning